Please
note that the key and token are string representations of the MD5 hash
result. Also the md5("PASSWORD") is a string. I.e. you have to convert
the hashes to strings before the token value can be assembled.